Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB9E530069183AFB099FC057F8F89A08984CA0284AF705D4F287FF075A8D816E/0/323830333a643061303a3a2f33322d3438203d3e20323636373935.roa
File:                     323830333a643061303a3a2f33322d3438203d3e20323636373935.roa (raw, json)
Hash identifier:          BJS9kmSkjtrbdS7aMFlx0HIALgmxwaF24j6NavrlBro=
Subject key identifier:   75:D6:0B:0B:A1:54:4F:54:9B:44:1D:E5:F7:1F:AB:E6:F7:1F:31:92
Certificate issuer:       /CN=88E2BDEA430FFCDFCC0882418C4C3075773024C1
Certificate serial:       2E3A3554254131EB12168C83952AF55B6967FA03
Authority key identifier: 88:E2:BD:EA:43:0F:FC:DF:CC:08:82:41:8C:4C:30:75:77:30:24:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88E2BDEA430FFCDFCC0882418C4C3075773024C1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB9E530069183AFB099FC057F8F89A08984CA0284AF705D4F287FF075A8D816E/0/323830333a643061303a3a2f33322d3438203d3e20323636373935.roa
Signing time:             Tue 06 Jan 2026 20:50:08 +0000
ROA not before:           Tue 06 Jan 2026 20:45:08 +0000
ROA not after:            Tue 05 Jan 2027 20:50:08 +0000
asID:                     266795
IP address blocks:        2803:d0a0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB9E530069183AFB099FC057F8F89A08984CA0284AF705D4F287FF075A8D816E/0/88E2BDEA430FFCDFCC0882418C4C3075773024C1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB9E530069183AFB099FC057F8F89A08984CA0284AF705D4F287FF075A8D816E/0/88E2BDEA430FFCDFCC0882418C4C3075773024C1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88E2BDEA430FFCDFCC0882418C4C3075773024C1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:3a:35:54:25:41:31:eb:12:16:8c:83:95:2a:f5:5b:69:67:fa:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88E2BDEA430FFCDFCC0882418C4C3075773024C1
        Validity
            Not Before: Jan  6 20:45:08 2026 GMT
            Not After : Jan  5 20:50:08 2027 GMT
        Subject: CN=75D60B0BA1544F549B441DE5F71FABE6F71F3192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:22:e5:80:63:2f:0f:11:30:29:fd:59:9a:7b:
                    ed:0f:10:52:f5:aa:6d:c4:f6:04:9b:eb:de:14:10:
                    a2:cd:4f:98:87:1e:b6:92:2b:3b:0e:41:f5:bc:6b:
                    41:1d:55:3c:ad:76:66:d6:3a:e3:e0:c6:5a:b3:30:
                    1d:a2:0d:de:7f:7d:22:2d:ff:ee:93:39:2b:11:d5:
                    a3:18:b2:f5:19:02:3d:9f:33:5d:29:41:be:85:f8:
                    87:25:8f:03:0b:69:aa:e3:e3:d0:a1:d3:1f:51:d4:
                    91:98:66:8b:8d:0b:d9:dd:ab:e1:a7:70:5e:db:42:
                    61:c2:8d:a1:30:da:df:fc:d8:7f:23:91:74:47:7b:
                    20:3e:b7:bf:e9:fd:10:a1:64:11:bc:66:93:22:6b:
                    7c:74:3b:3e:1c:d1:8b:68:1a:59:6e:fe:63:0e:56:
                    71:85:8f:bc:9c:7a:75:5a:95:8f:5c:74:07:72:35:
                    9c:1a:32:a6:e7:f1:4f:df:5b:28:2f:59:b6:40:9d:
                    78:87:79:54:9a:ff:d1:a3:f8:b3:d8:10:15:91:0f:
                    8e:c2:70:da:ad:13:4a:c0:5e:a2:87:70:ea:e7:99:
                    a9:b3:68:58:8c:15:0e:26:fc:23:02:ac:c2:8b:50:
                    3f:95:9b:b1:cf:d1:da:d2:a7:8a:db:7e:ae:ea:ea:
                    f1:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:D6:0B:0B:A1:54:4F:54:9B:44:1D:E5:F7:1F:AB:E6:F7:1F:31:92
            X509v3 Authority Key Identifier:
                keyid:88:E2:BD:EA:43:0F:FC:DF:CC:08:82:41:8C:4C:30:75:77:30:24:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB9E530069183AFB099FC057F8F89A08984CA0284AF705D4F287FF075A8D816E/0/88E2BDEA430FFCDFCC0882418C4C3075773024C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88E2BDEA430FFCDFCC0882418C4C3075773024C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB9E530069183AFB099FC057F8F89A08984CA0284AF705D4F287FF075A8D816E/0/323830333a643061303a3a2f33322d3438203d3e20323636373935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d0a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:d8:65:b1:aa:2b:71:a4:ea:4f:39:f0:f8:60:c9:b7:cb:38:
         14:2f:3d:7a:6d:30:49:ef:09:87:a6:20:74:65:3a:28:9e:55:
         6e:8d:16:90:dd:58:d4:80:01:08:f8:b3:fe:8f:b8:6f:d4:38:
         d9:3e:27:22:f6:a7:ac:87:9c:e6:36:79:77:52:b6:07:3c:db:
         4f:fe:91:c1:92:c4:70:e9:b5:37:10:f7:b3:dd:05:8b:96:8f:
         96:44:e9:74:73:e4:c1:7e:96:ae:a5:ed:5c:2d:45:c4:54:80:
         7b:3c:cc:ae:37:7e:ad:df:89:50:56:78:72:c0:70:38:9d:9f:
         fe:6f:4b:7f:a3:cf:52:20:36:89:35:d2:23:00:52:45:6b:50:
         06:0a:ee:97:81:86:08:dc:80:8f:ac:b6:25:5f:cf:f5:14:1d:
         a2:01:93:c9:a3:91:f3:6e:3b:27:b0:96:00:17:a1:ea:0d:98:
         c0:23:23:41:d9:5e:ff:10:19:ba:73:bc:f5:ce:74:23:b9:36:
         77:a8:8c:9d:e7:87:2e:d5:e8:05:b8:78:c2:ca:17:8b:0a:1a:
         b2:b0:97:f2:3f:ca:24:f1:3a:c3:b6:aa:b0:f1:41:c8:c0:d3:
         d3:b8:cd:b4:29:71:d9:41:2f:5e:51:81:ed:42:69:19:a0:e5:
         f0:1c:0a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 14:22:07 2026 by rpki-client